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Abstract :With the internet getting so 
popular data sharing and security of personal 
data has gain much more importance than 
before. Cloud provides and efficient way to 
outsource the data either online or offline but 
data security becomes one of the major issues 
in unreliable multi-cloud environment. This 
paper addresses the load balancing and 
security issues in cloud environment and also 
provides a way to provide better security and 
load balancing in cloud environment. 
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I. INTRODUCTION 



associations or people to impart different 
administrations in a consistent and practical way. 
Cloud computing exhibits an opportunity for 
pervasive frameworks to power computational 
and stockpiling assets to achieve assignments 
that would not typically be conceivable on such 
asset obliged gadgets. Distributed computing can 
empower programming and base planners to 
construct lighter frameworks that last more and 
are more convenient and versatile. Regardless of 
the favorable circumstances distributed 
computing offers to the originators of pervasive 
frameworks, there are a few impediments and 
constraints of distributed computing that must 
be tended to.. 



Engineering development and its selection are 
two discriminating effective variables for any 
business/association. Cloud computing is a late 
innovation ideal model that empowers 



1.1 Cloud basics 

Cloud computing, or "the cloud", concentrates 
on expanding the viability of the imparted assets. 
Cloud assets are typically imparted by numerous 
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clients as well as progressively reallocated for 
every interest and pay for every utilization 
premise. 

This can work for dispensing assets to clients. 
For instance, a cloud machine that serves Indian 
clients amid Indian business hours with an 
application (e.g., email) may reallocate the same 
assets to serve China clients amid China's 
business hours with an alternate application (e.g., 
an application server). This methodology ought 
to build the utilization of processing power 
accordingly decreasing ecological harm which 
are needed for a mixed bag of capacities. 
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1.2 Cloud Models 

Basically three are four cloud models mainly 
used. 

a. Private Cloud 

b. Public Cloud 



c. Hybrid Cloud 

Private Cloud 

Private cloud give the capacity to all the 
more specifically oversee assets that oblige a 
larger amount of control than is typically 
accessible from people in general cloud. 

Private cloud are typically utilized for a 
solitary business. For some associations 
considering distributed computing, private mists 
structures better beginning stage. They permit 
the association to have software's, situations, and 
databases in a cloud, while tending to concerns 
with respect to imparting and security and 
protection that can emerge in the general 
population the earth. 

Typically, in Premises or Internal Private the 
earth, the client possesses the greater part of the 
information and supplies in the private cloud, 
has complete obligation regarding all the IT 
assets and also the information. That is the 
reason not at all like an open cloud, setting up 
shop in a private cloud obliges ability with 
system joining and with great virtualization and 
cloud stage innovations; you'll need to run your 
equipment, stockpiling, 

Public Cloud 

The public cloud is a blending of figuring 
administrations accessible on the Internet. It 
incorporates (Saas) Software as a Service 
applications, for example, Amazon.com or 
Yahoo's Ymail, programming advancement 
(Paas) Platforms as a Service, for example, 
Microsoft's Azure, and (Iaas) Infrastructures as a 
Service from an extensive variety of merchants. 
Nonetheless, general society cloud just isn't the 
best decision for each little business. 

With the special cases of some new 
organizations and a hand sized scoop of existing 
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organizations who have actualized new 
frameworks, none of the business information 
dwell absolutely in general society cloud. Major 
purpose behind this is that most open cloud 
applications run on a multi-inhabitant premise. 
That is, however your information and data is 
divided from others information, it is constantly 
prepared by literally the same application 
programming code that is likewise being utilized 
by numerous different organizations. 

Hybrid Clouds 

You can decide to keep up a few frameworks 
and information in- house while utilizing outer 
administrations where they will be more viable 
for your business. Such a joined result is known 
as a Hybrid Cloud. 

A hybrid cloud is for the most part best-of- 
breed. It joins the solace level of a private cloud 
with the adaptability and flexibility of people in 
general cloud. 

Crossover stages utilize either open mists or 
off-site Hosted Virtual Private Clouds for a few 
applications and courses of action. They combine 
these with on premises private mists for high- 
security application situations to power the best 
of both planets. 

Likewise with the private model, in a mixture 
cloud, an association may decide to keep on 
using their current server farm gear and keep 
touchy information secured all alone system. 
Furthermore like general society cloud, a half 
and half model lets an association exploit a 
cloud's versatility, availability, reinforcement, 
and fiasco recuperation. It's an approach to 
address a percentage of the constraints of people 
in general cloud while even now picking up a 
considerable lot of the general population cloud's 
profits. 



1.3 Cloud Service 

A. Software as a Service (SaaS) 

SaaS clients rent usage of applications running 
within the Clouds provider infrastructure, for 
example SalesForce. The applications are 
typically offered to the clients via the Internet 
and are managed completely by the Cloud 
provider. That means that the administration of 
these services such as updating and patching are 
in the providers responsibility. The benefit of 
SaaS is that all clients are running the same 
software version and new functionality can be 
easily integrated by the provider and is therefore 
available to all clients. 

B. Platform as a Service (PaaS) 

PaaS Cloud providers offer an application 
platform as a service, for example Google App 
Engine. This enables clients to deploy custom 
software using the tools and programming 
languages offered by the provider. Clients have 
control over the deployed applications and 
environment-related settings. As with SaaS, the 
management of the underlying infrastructure lies 
within the responsibility of the provider. 

C. Infrastructure as a Service (IaaS) 

Iaas conveys fittings assets, for example, CPU, 
plate space or system segments as an 
administration. These assets are generally 
conveyed as a virtualization stage by the Cloud 
supplier and might be gotten to over the Internet 
by the customer. The customer has full control of 
the virtualized stage and is not in charge of 
dealing with the underlying base. 
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D. Storage as a service 

Capacity as an administration (Staas) is a plan of 
action in which an expansive administration 
supplier rents space in their stockpiling 
foundation on a membership premise. The 
economy of scale in the administration supplier's 
framework permits them to give stockpiling a 
great deal more cost adequately than most people 
or organizations can give their own particular 
stockpiling, when aggregate expense of 
possession is considered. Capacity as a Service is 
frequently used to illuminate offsite 
reinforcement challenges. Faultfinders of 
capacity as an administration point to the vast 
measure of system data transmission needed to 
direct their stockpiling using a web based 
administration. 

II. CLOUD COMPUTING 
CONCERNS 

The greatest worries about cloud computing are 
security and protection. The thought of giving 
over critical information to an alternate 
organization stresses some individuals. 
Corporate officials may waver to exploit a 
distributed computing framework in light of the 
fact that they can't stay with their's data under 
lock and key. The counterargument to this 
position is that the organizations offering 
distributed computing administrations live and 
pass on by their notorieties. It profits these 
organizations to have solid efforts to establish 
safety set up. Generally, the administration 
would lose all its customers. 



bargained. Distributed computing organizations 
will need to discover approaches to ensure 
customer security. One route is to utilize 
confirmation systems, for example, client names 
and passwords. An alternate is to utilize an 
approval configuration - every client can get to 
just the information and applications significant 
to his or her employment. 

2.1 Load balancing Algorithm 

The Round Robin Method 

At the point when a heap adjusting virtual server 
is designed to utilize the round robin strategy, it 
ceaselessly pivots a rundown of the 
administrations that are sure to it. At the point 
when the virtual server gets a solicitation, it 
doles out the association with the first 
administration in the rundown, and after that 
moves that administration to the lowest part of 
the rundown. 

The accompanying graph outlines how the 
framework utilizes the round robin technique 
with a heap adjusting setup that contains three 
heap adjusted servers and their related 
administrations. 



It's to their greatest advantage to utilize the most 
praiseworthy strategies to secure their customers' 
information. Security is an alternate matter. On 
the off chance that a customer can log in from 
any area to get to information and applications, 
its conceivable the customer's security could be 
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III. LITERATURE REVIEW 

There are many issues with current cloud and 
their architectures. Some of them are users are 
often tied with one cloud provider, computing 
components are tightly coupled, lack of SLA 
supports, lack of Multi-tenancy supports, Lack of 
Flexibility for User Interface. [4] 

One of the most important issues related to cloud 
security risks is data integrity. The data stored in 
the cloud may suffer from damage during 
transition operations from or to the cloud storage 
provider. Cachinet al. give examples of the risk 
of attacks from both inside and outside the cloud 
provider, such as the recently attacked Red Hat 
Linux's distribution servers . Another example 
of breached data occurred in 2009 in Google 
Docs, which triggered the Electronic Privacy 
Information Centre for the Federal Trade 
Commission to open an investigation into 
Google's Cloud Computing Services . Another 
example of a risk to data integrity recently 
occurred in Amazon S3 where users suffered 
from data corruption . 



One of the results that they propose is to utilize 
a Byzantine flaw tolerant replication convention 
inside the cloud. Hendricks et al. express that 
this result can evade information defilement 
created by a few parts in the cloud. Then again, 
Cachinet al. assert that utilizing the Byzantine 
flaw tolerant replication convention inside the 
cloud is unsatisfactory because of the way that 
the servers having a place with cloud suppliers 
utilize the same framework establishments and 
are physically placed in the same spot [1]. As per 
Garfinkel[19], an alternate security hazard that 
may happen with a cloud supplier, for example, 
the Amazon cloud administration, is a hacked 
secret key or information interruption. In the 
event that somebody gets access to an Amazon 
account secret key, they will have the capacity to 
get to the majority of the account's occasions and 
assets [1]. 

Despite the fact that cloud suppliers are mindful 
of the malevolent insider threat, they expect that 
they have basic answers for assuage the issue [1]. 
Rocha and Correia [1] focus conceivable 
assailants for Iaas cloud suppliers. For 
illustration, Grosse et al. [1] propose one result is 
to keep any physical access to the servers. 
Notwithstanding, Rocha and Correia [1] contend 
that the aggressors delineated in their work have 
remote get to and needn't bother with any 
physical access to the servers. Grosse et al. [1] 
propose an alternate result is to screen all right to 
gain entrance to the servers in a cloud where the 
client's information is put away. Be that as it 
may, Rocha and Correia [1] assert that this 
component is gainful for observing worker's 
conduct as far as whether they are after the 
protection arrangement of the organization or 
not, however it is not successful in light of the 
fact that it identifies the issue after it has 
happened. 

An alternate methodology to secure distributed 
computing is for the information holder to store 
scrambled information in the cloud, and issue 
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decoding keys to approved clients. At that point, 
when a client is renounced, the information 
manager will issue re-encryption orders to the 
cloud to re-scramble the information, to keep the 
disavowed client from decoding the information, 
and to produce new unscrambling keys to 
substantial clients, so they can keep on getting to 
the information. Then again, since a distributed 
computing environment is involved numerous 
cloud servers, such summons may not be gotten 
and executed by the majority of the cloud servers 
because of problematic system correspondences 
[3]. 

An alternate approach to secure the information 
utilizing diverse squeezing and encryption 
calculations and to conceal its area from the 
clients that stores and recovers it . The main 
contrast is that the framework introduced by Olfa 
Nasraoui [2] is an application based framework 
like which will run on the customers own 
framework. This application will permit clients 
to transfer record of diverse organizations with 
security peculiarities including Encryption and 
Compression. The transferred records might be 
gotten to from anyplace utilizing the application 
which is given. 

The security of the Olfa Nasraoui [2] model has 
been investigation on the premise of their 
encryption calculation and the key administration 
. It has been watched that the encryption 
calculation have their own particular attributes; 
one calculation gives security at the expense of 
fittings, other is solid however utilizes more 
number of keys, one takes additionally handling 
time. This area demonstrates the different 
parameters which assumes a paramount part 
while selecting the cryptographic calculation. 
The Algorithm discovered most guaranteeing is 
AES Algorithm with 256 bit key size(256k) [2]. 

A principle gimmick of cloud is information 
offering. Cheng-Kang Chu, Sherman S. M. 
Chow, Wen-Guey Tzeng, Jianying Zhou, and 



Robert H. Deng [5] demonstrate to safely, 
effectively, and adaptably impart information to 
others in distributed storage. We portray new 
open key cryptosystems which deliver steady 
size figure messages such that proficient 
assignment of unscrambling rights for any set of 
figure writings are conceivable. The curiosity is 
that one can total any set of mystery keys and 
make them as minimized as a solitary key, yet 
enveloping the force of every last one of keys 
being accumulated. At the end of the day, the 
mystery key holder can discharge a consistent 
size total key for adaptable decisions of figure 
content set in distributed storage, however the 
other encoded documents outside the set stay 
secret [5]. 



IV. PROPOSED SYSTEM 

The proposed work is planned to be carried out 
in the following manner. 



CLIENT REQUEST 



T 



LOAD 
BALANCER 




WEB 




IAAS 


SERVER 1 


r- f>\ 


DB SERVER 



WEB 
SERVER 2 



IAAS 
DB SERVER 



IAAS 
DB SERVER 



The system will provide load balancing both in 
terms of database as well as processing power 
and the file to be uploaded will be splitted into n 
parts and each part will be stored in a different 
cloud server. Consider an example where a file is 
splitted into two part out of which one is stored 
in Hotmail IaaS and other in Amazon IaaS. 
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V. CONCLUSIONS 

Iaas is the establishment layer of the Cloud 
Computing conveyance demonstrate that 
comprises of numerous segments and 
innovations. Every segment in Cloud framework 
has its helplessness which may affect the entire 
Cloud's Computing security. Cloud computing 
business develops quickly notwithstanding 
security concerns, so coordinated efforts between 
Cloud gatherings would aid in overcoming 
security difficulties and push secure Cloud 
Computing administrations. 

In this paper we said a percentage of the security 
worries about cloud computing furthermore 
proposed a framework that can help enhance the 
security of cloud Iaas administrations. Our 
methodology is intended to be executed in a 
multi nature. 
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